Real Time Logic LLC
This package includes the SharkSSL lite library and header files.
Dependents: WebSocket-Client-Example SharkMQ-LED-Demo
SharkSSL-Lite
Description: SharkSSL is an SSL v3.0 TLS v1.0/1.1/1.2 implementation of the TLS and SSL protocol standard. With its array of compile-time options and Raycrypto proprietary cryptographic algorithms, SharkSSL can be fine-tuned to a footprint that occupies less than 20 kB, while maintaining full x.509 authentication. The SharkSSL-Lite download includes a subset of SharkSSL and header files made for use in non-commercial and for evaluation purposes.
Features
- SSL|TLS v1.2
- Size: 21kB
- Encryption: Elliptic Curve Cryptography (ECC) | ChaCha20/Poly1305
- SharkSSL Online Documentation
- SMQ (Simple Message Queues) Client and SMQ Documentation
- Secure WebSocket Client
- Secure MQTT Client
Examples
- SharkMQ LED Demo: Secure control of LEDs on your mbed board using a browser.
- WebSocket Client: Connect to ELIZA the Psychotherapist
Limitations
SharkSSL-Lite includes a limited set of ciphers. To use SharkSSL-Lite, the peer side must support Elliptic Curve Cryptography (ECC) and you must use ECC certificates. The peer side must also support the new ChaCha20/Poly1305 cipher combination.
ChaCha20 and Poly1305 for TLS is published RFC 7905. The development of this new cipher was a response to many attacks discovered against other widely used TLS cipher suites. ChaCha20 is the cipher and Poly1305 is an authenticated encryption mode.
SharkSSL-Lite occupies less than 20kB, while maintaining full x.509 authentication. The ChaCha20/Poly1305 cipher software implementation is equally as fast as many hardware accelerated AES engines.
Creating ECC Certificates for SharkSSL-Lite
The following video shows how to create an Elliptic Curve Cryptography (ECC) certificate for a server, how to install the certificate in the server, and how to make the mbed clients connecting to the server trust this certificate. The server in this video is installed on a private/personal computer on a private network for test purposes. The video was produced for the embedded.com article How to run your own secure IoT cloud server.
inc/selibplat.h@1:d5e0e1dcf0d6, 2016-05-23 (annotated)
- Committer:
- wini
- Date:
- Mon May 23 13:56:30 2016 +0000
- Revision:
- 1:d5e0e1dcf0d6
- Parent:
- 0:e0adec41ad6b
Type conflict fix (U8-U32) for latest mbed release.
Who changed what in which revision?
| User | Revision | Line number | New contents of line |
|---|---|---|---|
| wini | 0:e0adec41ad6b | 1 | /** |
| wini | 0:e0adec41ad6b | 2 | * ____ _________ __ _ |
| wini | 0:e0adec41ad6b | 3 | * / __ \___ ____ _/ /_ __(_)___ ___ ___ / / ____ ____ _(_)____ |
| wini | 0:e0adec41ad6b | 4 | * / /_/ / _ \/ __ `/ / / / / / __ `__ \/ _ \/ / / __ \/ __ `/ / ___/ |
| wini | 0:e0adec41ad6b | 5 | * / _, _/ __/ /_/ / / / / / / / / / / / __/ /___/ /_/ / /_/ / / /__ |
| wini | 0:e0adec41ad6b | 6 | * /_/ |_|\___/\__,_/_/ /_/ /_/_/ /_/ /_/\___/_____/\____/\__, /_/\___/ |
| wini | 0:e0adec41ad6b | 7 | * /____/ |
| wini | 0:e0adec41ad6b | 8 | * |
| wini | 0:e0adec41ad6b | 9 | * SharkSSL Embedded SSL/TLS Stack |
| wini | 0:e0adec41ad6b | 10 | **************************************************************************** |
| wini | 0:e0adec41ad6b | 11 | * PROGRAM MODULE |
| wini | 0:e0adec41ad6b | 12 | * |
| wini | 0:e0adec41ad6b | 13 | * $Id: selibplat.h 3871 2016-03-27 01:23:13Z wini $ |
| wini | 0:e0adec41ad6b | 14 | * |
| wini | 0:e0adec41ad6b | 15 | * COPYRIGHT: Real Time Logic LLC, 2014 - 2016 |
| wini | 0:e0adec41ad6b | 16 | * |
| wini | 0:e0adec41ad6b | 17 | * This software is copyrighted by and is the sole property of Real |
| wini | 0:e0adec41ad6b | 18 | * Time Logic LLC. All rights, title, ownership, or other interests in |
| wini | 0:e0adec41ad6b | 19 | * the software remain the property of Real Time Logic LLC. This |
| wini | 0:e0adec41ad6b | 20 | * software may only be used in accordance with the terms and |
| wini | 0:e0adec41ad6b | 21 | * conditions stipulated in the corresponding license agreement under |
| wini | 0:e0adec41ad6b | 22 | * which the software has been supplied. Any unauthorized use, |
| wini | 0:e0adec41ad6b | 23 | * duplication, transmission, distribution, or disclosure of this |
| wini | 0:e0adec41ad6b | 24 | * software is expressly forbidden. |
| wini | 0:e0adec41ad6b | 25 | * |
| wini | 0:e0adec41ad6b | 26 | * This Copyright notice may not be removed or modified without prior |
| wini | 0:e0adec41ad6b | 27 | * written consent of Real Time Logic LLC. |
| wini | 0:e0adec41ad6b | 28 | * |
| wini | 0:e0adec41ad6b | 29 | * Real Time Logic LLC. reserves the right to modify this software |
| wini | 0:e0adec41ad6b | 30 | * without notice. |
| wini | 0:e0adec41ad6b | 31 | * |
| wini | 0:e0adec41ad6b | 32 | * http://realtimelogic.com |
| wini | 0:e0adec41ad6b | 33 | * http://sharkssl.com |
| wini | 0:e0adec41ad6b | 34 | **************************************************************************** |
| wini | 0:e0adec41ad6b | 35 | * |
| wini | 0:e0adec41ad6b | 36 | */ |
| wini | 0:e0adec41ad6b | 37 | |
| wini | 0:e0adec41ad6b | 38 | #define SharkSSLLwIP |
| wini | 0:e0adec41ad6b | 39 | #define NO_BSD_SOCK |
| wini | 0:e0adec41ad6b | 40 | |
| wini | 0:e0adec41ad6b | 41 | struct netconn; |
| wini | 0:e0adec41ad6b | 42 | struct netbuf; |
| wini | 0:e0adec41ad6b | 43 | |
| wini | 0:e0adec41ad6b | 44 | typedef struct |
| wini | 0:e0adec41ad6b | 45 | { |
| wini | 0:e0adec41ad6b | 46 | struct netconn* con; |
| wini | 0:e0adec41ad6b | 47 | struct netbuf* nbuf; |
| wini | 0:e0adec41ad6b | 48 | int pbOffs; |
| wini | 0:e0adec41ad6b | 49 | } SOCKET; |
| wini | 0:e0adec41ad6b | 50 | |
| wini | 0:e0adec41ad6b | 51 | #if __MBED__ |
| wini | 0:e0adec41ad6b | 52 | #include <stdio.h> |
| wini | 0:e0adec41ad6b | 53 | #ifndef B_LITTLE_ENDIAN |
| wini | 0:e0adec41ad6b | 54 | #define B_LITTLE_ENDIAN |
| wini | 0:e0adec41ad6b | 55 | #endif |
| wini | 0:e0adec41ad6b | 56 | #define XTYPES |
| wini | 0:e0adec41ad6b | 57 | #define xprintf(x) printf x |
| wini | 0:e0adec41ad6b | 58 | #endif |